PRIVACY POLICY
We are committed to protecting your privacy when you use our services. Therefore, we have prepared a policy that sets out how we process and protect personal data, applicable to customers.
Who is responsible for processing your data?
Rimura srl is the data controller of the personal data processed within the company and by the various data processors.
What data do we collect?
We collect the personal data necessary to fulfill orders, which are provided to us by customers.
In most cases, this includes contact information, such as name, phone number, email address, and home address.
For what purposes do we use the collected data?
• To fulfill orders.
• To send delivery status communications.
• To respond to inquiries.
• To send updates about our products.
We retain data for the time necessary to pursue the aforementioned purposes or comply with legal obligations. After this period, we delete it.
How do we ensure data protection?
In accordance with industry standards, we adopt appropriate technical and organizational security measures to ensure that all processed information is protected from unauthorized access. All data relating to you as a private individual will be stored within the European Union. Only a limited number of employees will have access to it, to perform strictly regulated management tasks.
What kind of personal data do we collect?
Your rights
You have the right to know what we do with your personal data, when and how we process it, and for what purpose. You also have the right to access your information and request its portability, rectification, or deletion.
Right of access
Once every calendar year and free of charge, you can request information on the data we hold, the purposes of the processing and the source from which we received it.
These requests must be sent in writing to the following address:
Rimura srl
Piazza Nicola e Costa
70013 Castellana Grotte (Ba)
In order to locate your personal data and send it to you, we need your name, tax code, address, telephone number, and email address. We also ask you to provide the email address to which you would like us to send the information and the password to open the compressed file containing the exported data.
To ensure that no one else but you can access it, it is important to include, in addition to your signature, a copy of a valid ID.
Right to rectification
We are responsible for ensuring that the data we process is always accurate and up-to-date. However, if you discover that your personal data is inaccurate, you have the right to request its rectification. Furthermore, taking into account the purposes of the processing, if you believe it to be incomplete, you may request its completion.
We will communicate any rectifications made at your request to all those in possession of the information. This obligation ceases if it proves impossible or involves disproportionate effort. Upon request, we can provide you with further details regarding who has received the rectified data.
Right to erasure
We will retain your data for as long as you remain our customer. Once our relationship has ended, we will delete it, unless we are required by law to retain it for a longer period (for example, the Swedish Accounting Act).
As a customer, you have the right to contact us and request the deletion of your personal data at any time. Deletion is mandatory in the following cases:
• if the data is no longer necessary for the purposes for which it was collected and processed;
• if the processing is based exclusively on your consent and you choose to withdraw it;
• if the data is processed for direct marketing purposes and you object to such processing;
• if you object to the processing of personal data for balancing of interests, and there are no legitimate grounds that override your interests;
• if the personal data is processed unlawfully;
• if deletion is required by law.
Complaints
If you believe that our processing of your personal data violates applicable privacy regulations, please let us know as soon as possible. You can also file a complaint directly with the Italian data protection authority.
Rimura Simulator and Photograph Processing
Purpose of the Service
The Rimura simulator allows users to preview graphics from the catalogue on the walls of an interior space, using either a photograph uploaded by the user or one of the available sample environments.
Photographs are processed using automated tools, including artificial intelligence-based technologies, in order to identify surfaces and enable the virtual application of the selected graphics.
Data Processed
For the operation of the simulator, the following data may be processed:
• the uploaded photograph and any personal data contained in the image;
• information generated through the identification of surfaces;
• simulation settings, including the selected graphics and walls;
• technical data required for connection, session management and security purposes, such as IP address, session identifiers, request timestamps and information relating to any errors.
Photographs are not used for advertising purposes, to identify individuals or to train artificial intelligence models.
Image Uploads
Uploading a personal photograph is optional, but necessary in order to create a simulation using the user’s own environment. Alternatively, users may use the sample environments without uploading personal photographs.
Users are requested to upload only images that they are legally entitled to use and to avoid uploading images containing identifiable individuals, documents, health-related information or other personal data that is not necessary for the simulation.
Legal Basis
The processing strictly necessary to provide the simulation service requested by the user is based on Article 6(1)(b) of Regulation (EU) 2016/679.
The processing of technical data for the purposes of preventing unauthorised access, combating misuse and protecting the operation of the service is based on the Data Controller’s legitimate interest in ensuring the security of its systems, pursuant to Article 6(1)(f), while respecting the rights and freedoms of data subjects.
Infrastructure, Recipients and Location of Processing
The simulator uses the infrastructure of Hetzner Online GmbH, with registered office at Industriestr. 25, 91710 Gunzenhausen, Germany, for application hosting and the automated processing of photographs.
The servers used for these activities are located in Finland, within the European Union. Hetzner acts as a data processor on the basis of an agreement pursuant to Article 28 of the GDPR, including through any sub-processors authorised in accordance with that agreement.
Access to the data is restricted to authorised personnel and appointed service providers, to the extent necessary for the performance of their respective activities. Photographs are transmitted to the application through encrypted connections.
Photographs and simulations are not automatically published or made available to other users of the service.
Server Retention
Photographs and processing data are temporarily stored on the servers in order to enable use of the simulation. Automatic deletion takes place within 30 minutes of the last activity in the session.
Photographs and the related processing results are not included in backups and are not recorded in technical logs.
Technical security logs are retained for 7 days. In the event of a specific security incident or a legal obligation, only the data necessary for the relevant purpose may be retained for a longer period, for the time required to manage the incident or comply with the applicable legal obligation.
History and Storage on the User’s Device
To allow users to resume previous simulations, the browser may store up to four recent environments on the user’s device, together with the related processing data.
The history has an expiration period of 30 days from the date it is saved. Expired items are removed the next time the application is used. If the application is not reopened, locally stored data may remain on the device until the next clean-up or until the website data is deleted.
Users may remove environments using the history controls or delete the website data through their browser settings. Local storage is separate from temporary server-side storage.
Download and Sharing
Users may download or share the simulation using the features available within the application.
Downloading and sharing take place at the user’s initiative. Copies saved on the device or sent to recipients or external services are not deleted when an environment is removed from the simulator history.
The privacy policies of any external services selected for sharing will also apply.
Data Controller, Contact Details and Rights
The Data Controller is the entity identified in this privacy notice. For enquiries regarding the simulator and the processing of personal data, users may contact info@rimura.com.
In the cases and within the limits provided by applicable law, data subjects may exercise their rights of access, rectification, erasure, restriction of processing, objection and data portability.
Data subjects may also lodge a complaint with the Italian Data Protection Authority (Garante per la protezione dei dati personali) through the channels indicated on its website www.garanteprivacy.it.
COOKIES
To ensure we send you the most relevant information and offer you the best possible assistance when using our and our partners' online services, we collect information using cookies stored on your devices.